<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoPlainText">Finally, I have the IDP Login page coming up... shew !!!<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Now, another error to deal with. Can you guys see what is going on here?<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">18:05:57.761 [http-bio-8443-exec-7] DEBUG o.o.s.b.AuthnResponseEndpointSelector - Filtering peer endpoints. Supported peer endpoint bindings: [urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign, urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST,
urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact]<o:p></o:p></p>
<p class="MsoPlainText">18:05:57.761 [http-bio-8443-exec-7] DEBUG o.o.s.b.AuthnResponseEndpointSelector - Removing endpoint https://xxx.pagerduty.com/Shibboleth.sso/SAML2/ECP because its binding urn:oasis:names:tc:SAML:2.0:bindings:PAOS is not supported<o:p></o:p></p>
<p class="MsoPlainText">18:05:57.761 [http-bio-8443-exec-7] DEBUG o.o.s.b.AuthnResponseEndpointSelector - Removing endpoint https://xxx.pagerduty.com/sso/saml/consume because its binding urn:oasis:names:tc:SAML:2.0:bindings:HTTPS-POST is not supported<o:p></o:p></p>
<p class="MsoPlainText">18:05:57.762 [http-bio-8443-exec-7] DEBUG o.o.s.b.AuthnResponseEndpointSelector - Selecting endpoint by ACS URL 'https://xxx.pagerduty.com/sso/saml/consume' and protocol binding 'null' for request '_f1bab130-0efd-0133-677c-22000adc166c'
from entity 'https://xxx.pagerduty.com'<o:p></o:p></p>
<p class="MsoPlainText">18:05:57.762 [http-bio-8443-exec-7] DEBUG o.o.s.b.AuthnResponseEndpointSelector - Endpoint with Location 'https://xxx.pagerduty.com/Shibboleth.sso/SAML2/POST/SSO' discarded because neither its Location nor ResponseLocation match ACS
URL 'https://xxx.pagerduty.com/sso/saml/consume'<o:p></o:p></p>
<p class="MsoPlainText">18:05:57.762 [http-bio-8443-exec-7] DEBUG o.o.s.b.AuthnResponseEndpointSelector - Endpoint with Location 'https://xxx.pagerduty.com/Shibboleth.sso/SAML2/POST-SimpleSign' discarded because neither its Location nor ResponseLocation match
ACS URL 'https://xxx.pagerduty.com/sso/saml/consume'<o:p></o:p></p>
<p class="MsoPlainText">18:05:57.762 [http-bio-8443-exec-7] DEBUG o.o.s.b.AuthnResponseEndpointSelector - Endpoint with Location 'https://xxx.pagerduty.com/Shibboleth.sso/SAML2/Artifact' discarded because neither its Location nor ResponseLocation match ACS
URL 'https://xxx.pagerduty.com/sso/saml/consume'<o:p></o:p></p>
<p class="MsoPlainText">18:05:57.762 [http-bio-8443-exec-7] WARN o.o.s.b.AuthnResponseEndpointSelector - Relying party 'https://xxx.pagerduty.com' requested the response to be returned to endpoint with ACS URL 'https://xxx.pagerduty.com/sso/saml/consume'
and binding 'any' however no endpoint, with that URL and using a supported binding, can be found in the relying party's metadata
<o:p></o:p></p>
<p class="MsoPlainText">18:05:57.762 [http-bio-8443-exec-7] ERROR e.i.m.s.i.p.AbstractSAMLProfileHandler - No return endpoint available for relying party https://xxx.pagerduty.com<o:p></o:p></p>
<p class="MsoPlainText">18:05:57.865 [http-bio-8443-exec-7] TRACE e.i.m.s.idp.util.HttpServletHelper - Looking up LoginContext with key c821c3d14eb5389906e9e7f9af6e91a5c0fdf12d69c1a86b9efca48f9c3758a1 from StorageService parition: loginContexts<o:p></o:p></p>
<p class="MsoPlainText">18:05:57.865 [http-bio-8443-exec-7] DEBUG e.i.m.s.idp.util.HttpServletHelper - No login context in storage service<o:p></o:p></p>
<p class="MsoPlainText">18:05:57.865 [http-bio-8443-exec-7] DEBUG e.i.m.s.idp.ui.ServiceContactTag - No relying party, nothing to display<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Charles Cahill<o:p></o:p></p>
<p class="MsoPlainText">SSO/LDAP/Web Application Support<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Desk 502 452-4737 <o:p></o:p></p>
<p class="MsoPlainText">Cell 502 541-5702<o:p></o:p></p>
<p class="MsoPlainText">Charles.Cahill@ge.com<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">-----Original Message-----<br>
From: users [mailto:users-bounces@shibboleth.net] On Behalf Of Cantor, Scott<br>
Sent: Thursday, July 16, 2015 2:45 PM<br>
To: Shib Users<br>
Subject: Re: Issues getting PagerDuty which uses SAML 2.0 to talk to Shibboleth IDP.</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">On 7/16/15, 2:14 PM, "users on behalf of Cahill, Charles (GE Appliances)" <<a href="mailto:users-bounces@shibboleth.net%20on%20behalf%20of%20Charles.Cahill@ge.com"><span style="color:windowtext;text-decoration:none">users-bounces@shibboleth.net
on behalf of Charles.Cahill@ge.com</span></a>> wrote:<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">>Can anyone tell me if I need to change something on the IDP side to get it to talk on https.<o:p></o:p></p>
<p class="MsoPlainText">>Seems like it only wants to talk on http<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Has nothing to do with the IdP, web server configuration is in your hands. If you're offloading SSL, that requires proper configuration of the container, the specifics of which depend on the container. Overriding the scheme and/or port
is something you'll have to configure in the connector usually.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">-- Scott<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">-- <o:p></o:p></p>
<p class="MsoPlainText">To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
<span style="color:windowtext;text-decoration:none">users-unsubscribe@shibboleth.net</span></a><o:p></o:p></p>
</div>
</body>
</html>